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ABSTRACT 

Even though the effective use of information 
resources is critical to government operations, reports of studies by 
the Information Management and Technology (IMTEC) Division of the 
General Accounting Office have shown that agencies have frequently 
had problems in managing these resources. At the request of the 
Committee on Government Operations of the House of Representatives, 
all reports of such studies issued between October 1, 1988, and May 
31, 1991, were examined. Of the 192 reports, 132 identified one or 
more problems relating to IRM. These reports covered information 
management in both the civil and defense sectors and looked at 
specific information systems as well as broad, government-wide 
issues. Massive cost overruns, inaccurate data, and poor system 
performance were frequently experienced. The management and 
operational problems described in these studies tend to fall into one 
of 10 different categories, with the most common problem being 
inadequate management of the information system development life 
cycle. Other problem areas include an inability to ensure the 
security and integrity of information systems; an inability of 
information systems to work together; and data that are inaccurate, 
unreliable, or incomplete. The first of 12 appendixes that make up 
the major part of this report summarizes the problem categories by 
type of problem and number of IMTEC reports per fiscal year, and the 
next 10 appendixes provide a description and examples of each 
category, as well as a list of reports that fell under that category. 
The final appendix lists the major contributors to the report. 
(BBM) 
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United States 

General Accounting Office 

Washington, D.C. 20548 



Information Management and 
Technology Division 

B-246430 

February 13, 1992 

The Honorable John Conyers, Jr. 

Chairman, Committee on Government Operations 

House of Representatives 

Dear Mr. Chairman; 

The magnitude and complexity of the federal government s information 
technology resources— the hardware, software, data, and people necessary 
to support the mission of an organization— require effective and efficient 
management. These resources are critical to ensuring the effective delivery 
or conduct of every mpjor government activity. The nation's defense, rev- 
enue collection, health programs, and benefits programs all rely on infor- 
mation technology for developing and operating the complex systems 
required by these programs. Simply put, good managen.^nt enhances these 
programs; poor management makes effective program operation impos- 
sible to achieve. 

Even though the effective use of information resources is critical to gov- 
ernment operations, our reports have shown time and again that agencies 
have had problems in managing these resources. At your request, we have 
summarized the information resources management (ItiM) problems docu- 
mented in previously issued reports. 

To conduct our review, we examined all reports issued between October 1, 
1988, and May 31 , P91 , by our Information Management and Technology 
Division (IMTKC). Of the 192 reports that IMTEC issued during this time, 132 
identified one or more problems relating to IKM. These reports covered 
information management in both the civil and defense sectors and looked 
at specific information systems as well as broad, governmentwide issues. 
Massive cost overruns, inaccurate data, and poor system performance were 
frequently experienced. 

The management and operational problems described in our past work 
tend to fall into one of ten different categories with the most common 
problem being inadequate management of the information system develop- 
ment life cycle. Other problem areas include an inability to ensure the 
security and integrity of information systems; an inability of information 
systems to work together; and data that are inaccurate, unreliable, or 
incomplete. Appendix 1 summarizes the problem categories by type and 
frequency, and appendixes 11 through XI provide a description and 
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examples of each category, as well as a list of reports that fell under each 
category. 



Our work was performed in accordance with generally accepted govern- 
ment auditing standards. As arranged with your office, unless you publicly 
announce this report's contents earlier, we plan no further distribution of it 
until 30 days from the date of this letter. At that time, we will send copies 
to interested parties, and make copies available to others upon request. 

Please contact me at (202) 336-6406 if you have any questions concerning 
this report. Major contributors are listed in appendix XII. 

Sincerely yours, 




Jack L. Brock, Jr. 
Director, Government Information 
and Financial Management 
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Abbreviations 


A1)P 


automated data processing 


CFTC 


Commodity Futures Trading Commission 


DOD 


Department of Defense 


EAGLE 


Enhanced Automation for the Government Legal Environment 


EEOC 


Equal Employment Opportunity Commission 


FAA 


Federal Aviation Administration 


FDA 


Food and Drug Administration 


FEKS 


Federal Employee Retirement System 


t.ao 


General Accounting Office 


HCFA 


Health Care Financing Administration 


IMTEC 


Information Management and Technology Division 


INS 


Immigration and Naturalization Service 


IKM 


information resources management 


IRS 


Internal Revenue Service 


LAMPS 


Light Airborne Multipurpose System 


MAISRC 


M*\jor Automated Information System Review Committee 


NASA 


National Aeronautics and Space Administration 


NOAA 


National Oceanic and Atmospheric Administration 


NORAl) 


North American Aerospace Defense Command 


OPM 


Office of Personnel Management 


SEC 


Securities and Exchange Commission 


SIDPERS-a 


Standard Installation/Division Personnel System III 


SSA 


Social Security Administration 


SPAN 


Space Physics Analysis Network 
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Appendix I 



Number of Reports Citing Information 
Resources Management Problems 



Our review of iMTEC's work performed from October 1988 to May 1991 
identified 132 reports (out of a total of 192) that described 1RM problems. 
We summarized these problems in ten categories; the table depicts the cat- 
egories and tne number of reports that fell within them each year. 



Table IRM Problems mHHHMHHMHHHHHHHH 

Number of reports for fiscal 
year 



Problem 


1989 


1990 


1991" 


Total 6 


Inadequate management of information 










systems development life cycle 


24 


33 


9 


66 


Ineffective oversight and control of IRM 


7 


18 


4 


29 


Inability to ensure the security, integrity, or 










reliability of information systems 


3 


11 


2 


16 


Inability of systems to work together 


2 


8 


4 


14 


Inadequate resources to accomplish IRM 










goals 


2 


5 


2 


9 


Cost overruns 


13 


6 


3 


22 


Schedule delays 


10 


8 


2 


20 


Systems not performing as intended 


3 


3 


1 


7 


Data that were inaccurate, unreliable, or 










incomplete 


4 


7 


7 


18 


Systems that make access to data 










time-consuming or cumbersome 


2 


4 


2 


8 



^Fiscal year 1991 reports include only those issued before May 31 1991 



^Reports tnat identified more than one problem are listed under more than one category, so the total 
number of reports is more t'.ian 132 
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App endix II 

Inadequate Management of Information 
Systems Development Life Cycle 



The information systems development life cycle refers to the development 
of a system from its conception to the point at which it is no longer used. It 
includes all of the activities associated with the analysis, acquisition, 
design, development, test, integration, operation, maintenance, and modifi- 
cation of a system. Government practice translates this lile cycle into a 
series of discrete steps for managers to follow. Proper management 
includes steps such as analysis of user/organizational requirements to jus- 
tify the system, periodic testing of the system during its development 
phase, and plans for monitoring the work load capacity of the system. 

Careful management of the system development life cycle increases the 
likelihood that the system will perform as intended and will be delivered on 
time and within budget. Failure to effectively manage the development and 
modification of information systems was the most frequently reported 
source of problems. Sixty-six of our reports identified instances in which 
such management was inadequate. Problems ranged from not doing a 
proper cost/benefit analysis to inadequate testing of mqjor system modules 
before the system became operational. 

For example, failure to properly plan an information system's development 
prompted us to question whether further development was warranted. A 
report on the Health Care Financing Administration (HCFA), part of the 
Department of Health and Human Services, stated that HCFA had not esti- 
mated total costs of a new Medicare claims processing system, did not doc- 
ument its expected benefits and savings, and did not test the system in a 
way that would generate useful information. 1 The report recommended that 
the claims processing system— which at the time of the report had become 
operational— be discontinued if no benefit or cost savings could be proved. 

Our reports also identified problems in the later stages of the systems 
development life cycle. One report questioned the adequacy of the Federal 
Aviation Administration's (FAA) plan to replace antiquated computers in the 
Los Angeles basin area because the agency could not adequately judge 
whether the new computers would solve the major problem with the old 
system: insufficient computer capacity. 2 A capacity manageme\i, 
program-which FAA did not have-could assist in forecasting computer 
requirements to ensure that computers have sufficient capacity to meet 
peak demands. The report noted that without such a program, FAA had no 



! A1)P ^steins: HCFA's Failure to Foll ow Guidelines Ma ke s System Ef fe ctiveness Un certain 
(GAO/lMTEC-90.53,'July"26 1990)." 

2 Air Traffic ControUnadequate Plan ning Incre ases Risk of Computer Failures in Los Angeles 
(GAO/1MT EC-90-49, July 16,1990)." 
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Appendix II 

Inadequate Management of Information 
Systems Development Life Cycle 



way to evaluate potential alternatives to both its short-term and long-term 
plans for the basin. 



Related Products adp Acquisition: Defense Logistics Agency Has Not Justified Need for Addi- 

ti onal Computer (GAO/lMTEC-91-33, May 23, 1991). 

FAA Registry Systems: Key Steps Need to Be Performed Before 
Modernization Proceeds (GAO/IMTEC-9 1-29, Apr. 9, 1991). 

Banks and Thrifts: Cause of Federal Regulators' Delays in Releasing Timely 
Call Report Data (GAO/IMTEC-91-26BK, Feb. 26, 1991). 

Space Shuttle: NASA Should Implement Independent Oversight of Software 
Development (GAO/IMTEC-91-20, Feb. 22, 1991). 

Computer Technology: Air Attack Warning System Cannot Process All 
Radar Track Data (GAO/IMTEC-91-15, May 13, 1991). 

ADP P rocu rement: Better Capacity Planning Needed at Agriculture's 
National Finance Center (GAO/IMTEC-91-14, Feb. 13, 1991). 

Environmental Data: Major Effort Is Needed to Improve NOAA's Data Man- 
agement and Archiving (GAO/lMTEC-91-1 1, Nov. 20, 1990). 

Defense Communications: Millions May Be Spent Unnecessarily to Expand 
Data Network (GAO/IMTEC-91-6, Nov. 7, 1990). 

Space Operations: NASA Is Not Archiving All Potentially Valuable Data 

(GAO/IMTEC-91-3, Nov. 2, 1990). 

Info rmation Resources: Management Improvements Essen tia l for Key 
Agriculture Automated Systems (GAO/IMTEC-90-85, Sept. 12, 1990). 

a dp Budget: Potential Reductions to the Department of the Navy's Budget 

Request (GAO/IMTEC-90-84BR, Sept. 17, 1990). 

Securities Industry Additional Testing Needed to Ensure Efficient 
Post-Trade Processing of Stocks (gao/IMTEC-90-83, Sept. 26, 1990). 

Embedd ed Computers: Navy's Approach to Developing Patrol Aircraft Avi - 
onics System Too Risky (gao/IMTEC-90-79, Sept. 28, 1 990). 
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Air Force ADP: Millions Can Be Saved If Automated Technical Order Sysiem 
IsDiscontinued (GAO/IMTEC-90-72, Aug. 23, 1990). 

FAA Procurement: Competition for Major Data-Processing Project Was 
Unjustifiably Limited (GAO/IMTEC-90-71, June 11, 1990). 

Information Resourc e s: Army Corporate Data Base Disregards 
Congressional and PCD Direction (GAO/IMTEC-90-64, July 19, 1990). 

Air Traffic Control: Continuing Delays Anticipated for the Advanced Auto- 
mation System (GAO/lMTEC-90-63, July 18, 1990). 

Strategic Defense System: Stable Design and Adequate Testing Must Pre- 
cede Decision to Deploy (GAO/lMTEC-90-61, July 6, 1990). 

ADP Budget: Potential Reductions to the Department of the Air Force s 
Budget Request (GAO/IMTEC-90-57BR, Sept. 26, 1990). 

Emb edded Computers: Navy Not Ready to Buy Avionics Computers for Its 
LAMPS Mk I Helicopters (GAO/lMTEC-90-54, May 31, 1990). 

ADP Systems: HCFA's Failure to Follov.' Guidelines Makes System 
Effectiveness Uncertain (GAO/IMTEC-90-53, July 26, 1990). 

Federal Communications Commission: Strategic Focus Needed to Improve 
Info rmation Resources Management (GAO/lMTEC-90-52, July 20, 1990). 

Air Traffic Control: Smaller Terminal Systems' Capacity Requirements 
Need to Be Defined (GAO/1MTEC-90-50, June 25, 1990). 

Ai r Traffic Control: Inadequate Planning Increases R ir k of Computer Fail- 
ures in Los Angeles (GAO/IMTEC-90-49, July 16, 1990). 

Computer Security: Governmentwide Planning Process Had Limited 
Impact (GAO/IMTEC-90-48, May 10, 1990). 

Air Forc e adp: Depot Maintenance System Development Risks Are High 
(GAO/IMTEC-90-46, May 25, 1990). 

Reti rement System: Concerns About QPM's FERS Automated Processing 
System Procurement (GAO/lMTEC-90-45, Apr. 4, 1990). 
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Medical adp Systems: Composite Health Care System: Defense Faces a Dif- 
fic ult Tas k (GAO/lMTEC-90-42, Mar. 15, 1990). 

faa Procurement: Major Data-Processing Contract Should Not Be Awarded 

(GAO/lMTEC-90-38, May 25, 1990). 

Air Traffic Control: Ineffective Management Plagues $ 1 .7-Billion Radar 
Program (GAO/lMTEC-90-37, May 31, 1990). 

Coast Guard: Strategic Focus Needed to Improve Information Resources 

Management. (GAO/IMTEC-90-32, Apr. 24, 1990). 



G eographic Information System: Forest Service Not Ready to Acquire 
Nationwide System (GAO/IMTEC-90-31, June 21, 1990). 

Informati on Re sources: Management Commitment Needed to Meet 
Information Cr .illenges (gao/imtec-90-27, Apr. 19, 1990). 

Compu ter Systems: F urther D evelo pme nt of Navy's Source Data System 
Needs to Be Reassessed (gao/imtec-90-25, May 8, 1990). 

A ir Force adp: The Pers o nnel Concept III System Is Not Ready f or 

Deployment (GAO/1MTEC-90-22, Feb. 27, 1990). 

Subm arine Techno logy: Transition Plans Needed to Realize G ains FYom 
POD Advanced Research (gao/IMTEC-90-21, Feb. 14, 1990). 

Electronic Funds Transfer: Oversi ght o f Critical Banking Systems Should 
be Strengthened (GAO/IMTEC-90-14 Jan. 4, 1990). 

Tax System Modernization: IRS' Challenge for the 21st Century 

(GAO/lMTEC-90-13, Feb. 8, 1990). 

Co mputer Acquisition: Navy's A vi ation Logistics System Not Ready fo r 
De ployment (GAO/1MTEC-90- 1 1 , Feb. 9, 1990). 

Air Force adp: Systems Funded Without Adequate Cost/Benefit Analyse s 

(GAO/1MTEC-90-6, Dec. 28, 1989). 

ADP Bu dget: Po tential R e ductions to Army Automation Initia tives 

(GAO/lMTEC-90-3, Nov. 20, 1989). 
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Space Operations: NASA Is Not Properly Safeguarding Valuable Data From 
Past Missions (GAO/IMTEC-90-1, Mar. 2, 1990). 

ADP Planning: SSA's February 1989 Report on Computer Modernization Is 

Incomplete (GAO/IMTEC-89-76, Sept. 25, 1989). 

Attack Warning: Defense Acquisition Board Should Address NORAU's 
Computer Deficiencies (GAO/IMTEC-89-74, Sept. 13, 1989). 

Computer Procurement: Hardware Upgrades for Navy Inventory Control 
System Should Be Delayed (GAO/lMTEC-89-67, Sept. 29, 1989). 

Air Traffic Control: Computer Capacity Shortfalls May Impair Flight Safety 
(GAO/IMTEC-89-63, July 6, 1989). 

Air Traffic Control: FAA Needs to Implement an Effective Testing Program 
(GAO/IMTEC-89-62, Sept. 22, 1989). 

ADP Procurement: Navy Improperly Restricted Competition for Its Civilian 
Pay System (GAO/1MTEC-89-61, June 21, 1989). 

ADP Planning: FDA's Plans to Improve Processing of Medical Device and 
Drug Applications (GAO/1MTEC-89-58, June 13, 1989). 

Military Space Operations: Operational Prob le ms Continue With t he Satel- 
lite Control Computer System (GAO/lMTEC-89-56,Aug.8, 1989). 

ADP Modernization: IRS' Automated Examination System-Troubled Past , 
Uncertain Future (GAO/IMTEC-89-54, June 22, 1989). 

ADP Systems: SSA Efforts in Implementing Its Field Offic e Modernization 

(GAO/IMTEC-89-45, May 17, 1989). 

ADP Acquisition: Air Force Logistics System Modernization Projects 
(GAO/IMTEC-89-42, Apr. 21, 1989). 

Software Maintenance: SSA's Use of Its Software Measurement Package 
(GAO/1MTEC-89-38, June 15, 1989). 

Co mputer Procurement: Navy Decision to Terminate I ts Standard 
Automated Financial System (GAO/IMTEC-89-37, Mar, 30, 1989). 
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ADP Modernization: IRS Needs to Assess Design Alternatives for Its Elec- 
tronic Filing System (GAO/IMTEC-89-33, May 5, 1989). 

Information Technology: Health Care Financing Administration's Budget 
Process Needs Improvement (gao/IMTEC-89-31, Aug. n, 1989). 

Air Force ADP: Evaluations Needed to Substantiate Modernization Program 

Benefits (GAO/lMTEC-89-29, May 5, 1989). 

ADP Systems: Army Decision to Use Air Force Military Pay System Appears 
Advantageous (GAO/IMTEf. -89-28, Mar. l, 1989). 

ADP Systems: Better Control Over States' Medicaid Systems Needed 
(GAQ/IMTEC-89-19, Aug. 2, 1989). 

Space Defense: Management and Technical Problems Delay Operations 
Center Acquisition (GAO/IMTEC-89-18, Apr. 20, 1989). 

A DP Management: Status of the Army's Logistics and Technical Information 

Initiatives (GAO/lMTEC-89-10, Oct. 31, 1988). 

Computer Operations: Improvements Needed in Social Security's Capacity 
Management Program (GAO/IMTEC-89-8, Jan. 18, 1989). 

Air Traffic Control: FAA Shoiild Define the Optimal Advanced Automation 
System Alternative (GAO/IMTEC-89-5, Nov. 30, 1988). 

Computer Systems: Navy Needs to Assess Less Costly Ways to Implement 

Its Stock Point System (GAO/IMTEC-89-2, Dec. 14, 1988). 

Attack Warning: nokad's Communications System Segm ent Replacement 
Program Should Be Reassessed (GAO/IMTEC-89-l, Nov. 30, 1988). 



hi 
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Append ix III 

Ineffective Oversight and Control of Information 
Resources Management 



Without oversight, an agency has no assurance that its system development 
projects are complying with the applicable standards, regulations, and 
management practices promulgated by an agency and by the government 
to reduce the chance of failure or delays. Numerous reports described 
oversight weaknesses in agencies 1 information management programs. For 
example, oversight problems at the Department of Defense were identified 
in a report that discussed Defense's Mqjor Automated Information System 
Review Committee (MA1SRC), which is responsible for reviewing the 
development efforts for any r " rmation system valued at over $ 100 mil- 
lion in total cost. One report » nd that the Office of the Secretary of 
Defense was not terminating 01 redirecting development activity even when 
warranted by the results of MAISRC reviews. 1 

According to another report, the Immigration and Naturalization Service 
(INS) does not have readily available the information needed to identify, 
apprehend, and deport criminal aliens. 2 This is due to missing data and to 
the inability of INS to share data among its own systems. This situation 
forces agency officials to query a number of different systems. In part, the 
problem of sharing information throughout INS was due to the agency's not 
providing adequate oversight of its IRM program. INS had not effectively 
evaluated its own management of information resources. Evaluations had 
focused on specific information systems, rather than addressing how effec- 
tively INS had managed its information resources as a whole. 

A 1990 report identified inadequate controls within the Department of 
Education as allowing significant abuses in the Stafford Student Loan pro- 
gram. 3 A total of $109 million in new loans was obtained by students who 
had defaulted on previous loans, and loans that totaled millions of dollars 
were disbursed to students who had reached their legal loan limits. These 
errors occurred because Education did not have adequate procedures for 
checking the accuracy and completeness of data in its loan data base and, 
therefore, was not able to identify student loan defaulters or determine the 
amount accrued by borrowers. 



'Automated Information Syste ms: Defense's Oversight Process Should Be Improved 
(GAO/lMTEC^O^Apr. 16, 1990) 

"Information Management: Imniigration and Naturalization Se rvice L a cks Read y Access to Essential 
Data (GAO/lMTEC*90-75/Sept/*277i990). 

"Stafford Student Loans: Millions ol D ollars in Lo ans Awarded to Ineligible Borrowers 
(0A(VlMTEC-9l"-7,Dec; "1 a, 1990)." 
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Ineffective Oversight and Control of 
Information Resources Management 



Related Products Financial Markets: Active Oversight of Market Automation by SEC and CFTC 

Needed (GAO/IMTEC-91-21, Apr. 2, 1991). 

Space Shuttle: NASA Should Implement Independent Oversight of Software 
Development (GAO/IMTEC-91-20, Feb. 22, 1991). 

Major ADP Systems: 1)01) Does Not Always Comply With Statutory 
Restriction on Obligation s (GAG-/IMTEC-9M6, Jan. 7, 1991). 

Stafford Student Loans: Millions of Dollars in Loans Awarded to Ineligible 
Borrowers (GAO/IMTEC-91-7, Dec. 12, 1990). 

Army Battlefield Automation: Oversight Needed to Assure Integrated 
System (GAO/IMTEC-90-78, July 24, 1990). 

Information Management: Immigration and Naturalization Service Lacks 
Ready Access to Essential Data (GAO/1MTEC-90-75, Sept. 27. 1990). 

Justice Automation: Tighter Computer Security Needed (GAO/IMTEC- 90-69, 
July 30, 1990). 

Information System: National Health Practitioner Data Bank Has Not Been 
Well Managed (GAO/IMTEC-90-68, Aug. 21, 1990). 

Army Automation: Decisions Needed on sidpeks-3 Before Further 

Development (GAO/IMTEC-90-66, Sept. 5, 1990). 

Minerals Management Service: Improvements Planned for Automated 
Royalty Management System (GAO/lMTEC-90-65, July 27, 1990). 

Information Resources: Army Should Limit Ncv Initiatives Until 
Management Program Is Implemented (GAO/lMTEC-90 -68, June 29, 1990). 

E mbedded Computers : N avy Not Ready to Buy Avionics Computers for Its 

LAMPS Mk I HeliCQpiers (GAO/1MTEC-90-54, May 31, 1990). 

Financial Mark ets: Oversight of Automation Used to Clear and Settle 
Trades Is Uneven (GAO/lMTEC-90-47, July 12, 1990). 

Air Traffic Control: Ineffecti v e Manage m ent Plagues $1.7-BiHion Rada r 
Program (GAO/lMTEC-90-37, May 3^ , 1990). 
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Ineffective Oversight and Control of <% 
Information Resources Management 



Automated Information Systems: Defense's Oversight Process Should Be 
improved (GAO/IMTEQ90-36, Apr. 16, 1990). 

DPI) Embedded Computers: Better Focus on This Technology Could 
Benefit Billion Dollar Weapons Programs (GAO/IMTEC-90-34, Apr. 19, 1990). 

Cus toms Automation: Duties and Other Collections Vulnerable to Frau d 
and Abuse (GAO/IMTEC-90-29, Feb. 28, 1990). 

Computer Systems: Further Development of Navy's Source Data System 
Needs to Be Reassessed (GAO/IMTEC-90-25, May 8, 1990). 

IK S Automation: Procurement Practices Need Strengthening 

(GAO/lMTEC-90-24, Jan. 12, 1990). 

Fi nancial Markets: Tighter Computer Security Needed (GAO/IMTEU- 90-15, 

Jan. 5, 1990). 

Electronic Funds Transfer: Oversight of Critical Banking Systems Should 
be Strengthened (gao/imtec-90-14, Jan. 4, 1990). 

Computer Security: Unauthorized Access to a NASA Scientific Network 
(GAO/IMTEC-90-2, Nov. 13, 1989). 

API' Budget: Potential Reductions to the Department of the Army's Budget 
R equest (GAO/IMTKC-89-69BK, Sept. 18, 1989). 

F utures Ma r kets: A u tomation Can Enhance Detection of Trade Abuses But 
Introduces New Risks (GAO/IMTEC-89-68, Sept. 7, 1989). 

Inf ormation Management: Issues Important to Farmers Home 
Administration Systems Modernization (GAO/IMTEC-89-64, Aug. 21, 1989). 



Air Traffic Control: faa Needs to Implement an Effective Testing Program 

(GAO/IMTEC-89-62, Sept. 22, 1989). 

Automated Information Systems: Schedule Delays and Cost Overruns 

Plague P O D Systems (GAO/1MTEC-89-36, May 10, 1989). 

Attack Warning: Better Man agement Required to Resolve norad 
IntcfflatT onlJcficien cica, (GAO/IMTEC-89-2G, July 7, 1989). 
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Appendix III 

Ineffective Oversight and Control of 
Information Resources Management 



Financial Integrity Act: Actions Need e d to Correct adp Internal Contr ol 
Weaknesses (GAO/lMTKC-89-1 1, May 9, 1989). 
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Appendix IV . 

Inability to Ensure Security, Integrity, or 
Reliabiity of Information Systems 



Security of data is an important issue, both to the public and to the govern- 
ment. When agencies collect data, they must be able to ensure that the data 
are reliable and secure from unauthorized access. The reports included in 
this category identified problems ranging from unauthorized access to sen- 
sitive data to the inability to ensure the reliability or integrity of a system. 
Several reports stated that actual security breaches had occurred, either in 
the form of unauthorized access by individuals or computer viruses. Other 
reports noted agency weaknesses in evaluating potential risk to informa- 
tion systems that left them vulnerable to incursions or damage. 

As an example of such an incursion, a report on the computer virus infec- 
tion of several computers using Internet in 1988— including the Depart- 
ment of Energy's Lawrence Livermore Laboratory and the National 
Aeronautics and Space Administration's (NASA) Ames Research 
Center-demonstrated the vulnerability of both government and pri- 
vate-sector networks. 1 Internet is the main computer network used by the 
United States research community. It includes over 500 networks, 
including ones sponsored by the National Science Foundation and the 
Department of Defense. Responsibility for computer security was handled 
primarily by the sites that own or operate the computers. The various net- 
works making up Internet are the responsibility of the network's sponsor, 
such as a federal agency or a research consortium. The lack of a lead 
agency or organization responsible for network-wide security management 
created difficulties in responding to the virus. Problems communicating 
information about the virus to members of the network and in cooi dinating 
emergency response activities were reported. The amount of damage that 
could have been done to valuable scientific data is incalculable. 

Another report showed that unauthorized users gained access dozens of 
times to NASA's Space Physics Analysis Network (span), which assists scien- 
tists in conducting unclassified space-related research. 2 At the time of the 
report, agency records showed that unauthorized access had taken place. 
NASA could not be sure that other incursions had not occurred undetected. 
Also, NASA could not judge the effectiveness of the security plans it had put 
in place to address the potential risks to span because it had not performed 
a security risk analysis. 



'Computer Securit y: Virus Highlights Need fo r Im proved Internet Managem ent (GAO/1MTEC-89-57, 

Junei2,l»H9).~ 

"Computer Security^ Unautho rized Access to a NASA Scientific Network (UAO/1MTEC-90-2, 
Nov. 1U, 15)89). 
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Appendix IV 

Inability to Ensure Seeurity, Integrity, or 
Reliability of Information Systems 



According to a 1990 report, the Department of Justice could not ensure the 
security of highly sensitive information, such as the names of defendants, 
witnesses, informants, and undercover law enforcement officials.^ Security 
weaknesses at Justice had heightened the possibility of unauthorized 
access to highly sensitive information or the interruption of computer 
services. For example, control of access to a sensitive data center was 
inadequate and software that could circumvent computer security safe- 
guards was easily accessible. Also, contingency plans had not been pre- 
pared or had not been tested. 



War on Drugs: Information Management Poses Formidable Challenges 
(GAO/lMTEC-9 1 -40, May 3 1 , 1 99 1 ). 

Financial Markets: Active Oversight of Market Automation by SEC and cftc 
Needed (GAO/IMTEC-91-21,Apr.2, 1991). 

Futures Markets: Use of Automation to Detect Trade Abuses 

(GAO/lMTEC-90-81, Aug. 24, 1990). 

Computers and Privacy: How the Gov er nment Obtains, Verifies, Uses, and 
Protects Personal Data (gao/imtec-90-70BR, Aug. 3, 1990). 

Justice Automation: Tighter Computer Security Needed (GAO/1MTEC- 90 09, 

July 30, 1990). 

Information System: National Health Practitioner Data Bank Has Not Been 
Well Managed (GAO/IMTEC-90-C>8, Aug. 2 1 , 1 990). 

S pace Communications: Performance of NASA's White Sands Ground 
Terminal (GAO/lMTEC-90-r>6, May 29, 1 990). 

Federal Communications Commission: Stra tegic Fo cus Needed to Improve 
Information Resources Management (GA0/IMTJSO90-52, July 20, 1990). 

Compute r Security: Governmentwide Planning Process Had Limited 

Impact (GAO/1MTEC-90-48, May 10, 1990). 

Customs A utom ation: Weaknesse s in Revenue Collection at .John F. 
Kennedy International Airport (UAO/lMTEC-90-16, Sept. 27, 1990). 



"Justify Automation: Tighter Computer Security Needed (GAtMMTKtMMMffl, July M0, l»»0). 
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Appendix IV 

Inability to Ensure Security, Integrity, or 
Reliability of Information Systems 



Electronic Funds Transfer: Oversight of Critical Banking Systems Should 
be Strengthened (GAO/IMTEC-90-14, Jan. 4, 1990). 

Computer Acquisition: Navy's Aviation Logistics System Not Ready for 
Deployment (GAO/IMTEC-90-1 1, Feb. 9, 1990). 

Comp uter Security: Unauthorized Access to a NASA Scientific Network 
(GAO/IMTEC-90-2, Nov. 13, 1989). 

Justice Automation: Security Risk Analyses and Plans for Project EAGLE Not 
Yet Prepared (GAO/IMTEC-89-65, Sept. 19, 1989). 

Computer Security: Virus Highlights Need for Improved Intern et 
Management (GAO/IMTEC-89-57, June 12, 1989). 

Space Operations: NASA's Communications Support for Earth Orbiting 
Spacecraft (GAO/IMTEC-89-41, Apr. 7, 1989). 
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Inability of Systems to Work Together 



The ability of systems within or among agencies to communicate and 
exchange data with each other enables agencies to more effectively per- 
form their missions by sharing information. However, the inability of infor- 
mation systems to share data or work together has been a common 
problem throughout the federal government. This inability often results 
when systems are developed without considering interagency or even agen- 
cywide needs. In some cases, a lack of planning, problems implementing 
plans, and changes to requirements have contributed to the problem. 

A classic example was discussed in a 1990 report, which stated that the 
Veterans Administration's (now Department of Veterans Affairs) systems 
were incompatible and could not readily exchange data within the agency 
and with external agencies, such as the Department of Defense. 1 To 
illustrate, the report showed that the Veterans Administration had to wait 
an average of 2 months to obtain Defense records documenting military 
service. Because of the delay in receiving records from Defense as well as 
other problems such as the Veterans Administration's paper-intensive, 
manual processing system, it was not unusual for a veteran to have to wait 
over 150 days for a claim to be processed. 

Another 1 990 report noted that the Army was not able to ensure that its 
new information systems could share data and work together because it 
had not completely implemented its irm program.- Specifically, it had not 
completed development of an Army-wide information system architecture 
to provide implementation guidance and milestones for the development of 
new systems. Instead, Army components were developing information 
systems without any guarantee that the systems would be able to share 
data and work together. 

A recent report highlighted the interoperability problems that the law 
enforcement community faces in managing the war on drugs/* A vital 
intelligence center for the Coast Guard's law enforcement activity used a 
system that could not accept data electronically from another system. As a 
result, Coast Guard personnel had to manually enter large amounts of drug 
intelligence data into the system. Coast Guard officials acknowledged that 
valuable time and resources were wasted because of this manual process. 

1 Information Resources: Managem ent Commitment Needed to Meet Information Challenges 
(GAO/IMTEC-9(W7, Apr. 19, 1990). 

" Inform ation Resources; Army Should L imit N ew Initiativesjjntil Manageme nt Progra m Is Impl ement ed 
(GAO/IMTEC-90.58, June 29, T99U). ™ " 

^aron Drugs: Information Management Poses Formidable Challenges (UAO/1MTEC-91-40, 
May 31 7199 1)7 
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Inability of Systems to Work Together 



Related Products War on Drugs: Information Management Poses Formidable Challenges 

(GAO/1MTEC-91-40, May 31, 1991). 

Attack Warning: Costs to Modernize NOKAD's Computer System 
Significantly Understated (gao/imtec-9 1-23, Apr. 10, 1991). 

Defense Communications: Millions May Be Spent Unnecessarily to Expand 

Data NetWork (GAO/IMTEC-91-6, Nov. 7, 1990). 

Information Resoiirces: Problems Persist in Justice's ADP Management and 
Operations (GAO/IMTEC-91-4, Nov. 6, 1990). 

Army Battlefield Automation: Oversight Needed to Assure Integrat ed 

System (GAO/IMTEC-90-78, July 24, 1990). 

Resolution Trust Corporation: Stronger Information Technology 
Leadership Needed (gao/IMTEC-90-76, July 23, 1990). 

Information Management: Immigration and Naturalization Service Lacks 
Ready Access to Essential Data (GAO/1MTEC-90-75, Sept. 27, 1990). 

Information Re s ources: Army Corporate Data Base Disregards 
Congressional and POD Direction (gao/imtec-90-64, July 19, 1990). 

Information Resources: Army Should Limit New Initiatives Unt il 
ManagementProgram Is Implemented (gao/IMTEC-90-58, June 29, 1990). 

Tax System Modernization: M an agement Mistakes Caused Delays in 
Automated Underreporter System (gao/IMTEC-90-51, July 10, 1990). 

Coast Guard: Strategic F ocus Needed to Improve Information Resources 
Management (GAO/1MTEC-90-32, Apr. 24, 1990). 

I nformat ion Resources: Management Commitment Needed to Meet 
information Challenge s (gao/imtec-90-27, Apr. 19, 1990). 

Justice Automation : U.S. Trustees Bankruptcy Case Management System 

(GAO/FmTEC-89-73. Sept. 25, 1989). 

Atj^k^arnmgjktter^anagemcnt Required to Resolve NQHAP 
integration Deficiencies (GAO/IMTEC-89-26, July 7, 1989). 
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Inadequate Resources to Accomplish IRM Goals 



Agencies have cited a lack of resources as an impediment to fulfilling ikm 
goals. Identified constraints included too few technical personnel and 
budget shortfalls. The most reported problem in this category was a lack of 
technical expertise. 

The Navy believed a limited pool of skilled Ada 1 programmers could cause 
schedule delays in the development of its w w target detection software, 
according to a 1989 report. ' The Navy had set an ambitious development 
schedule in order to have the system on hand for integration with its new 
Seawolf submarine. The schedule, however, was dependent on experienced 
Ada programmers. At the time of the report, the contractor developing the 
software did not have a consistent training program in place for Ada pro- 
grammers. The report warned of the potential for reduced programmer 
performance, an increased number of coding errors, or both. 

The Internal Revenue Sen/ice (IKS) faced a funding deficit in 1989 and 
1 990 for its ADP conversion of payroll and personnel systems. 3 irs was not 
sure it could complete its conversion on schedule or adequately train its 
payroll and personnel staff on the new system given its constrained budget. 
One official involved in the conversion process was concerned that if the 
conversion schedule slipped, costs could be greatly increased in per- 
forming the conversion. 



Related Products Defense ADP: Corporate Information Management Initiative Faces 

Significant Challenges (GAO/IMTEC-Ci-35, Apr 22, 1991). — ~ 

Information Resources: Problems Persist in Justice's Al)P Management an d 
Operations (GAO/lMTEC-91-4, Nov. 6, 1990). 

Information System: National Health Practitioner Data Bank Has Not Been 
Well Managed (GAO/IMTEC-90-68, Aug. 21,1 990). 

Tax System Mode r nization: Management Mistak es Cau s ed Delays in 
Automated Underreporter System (GAO/lMTEC-90-51, July io f 1990). 



! Ada is the standard programming language for the Department of Defense. 

2 Submaring Coirbat System: Technical Challenges Confronting Navy's Seawolf AN/BSV-2 Development 
(G~A0/IMTEC-89^ " '" 

"'Automated Systems: Treasury's Efforts to Improve 1U Payroll and Personnel Svstems 
(GAQ/lMTEC-90-4, Dec; 15/1 989). 
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Appendix VI 

Inadequate Resources to Accomplish IRM 
Goals 



PO P Embedded Computers: Better Focus on This Technology Could 
Benefit Billion Dollar Weapon s Programs (GAG-/1MTEC-90-34, Apr. 19, 1990). 

Financial Markets: Tighter Computer Security Needed (GAO/1MTEC- 90-15, 
Jan. 5, 1990). 

Automated Systems: Treasu r y's Efforts to Improve Its Payroll and 
Personnel Systems (GAO/1MTEC-90-4, Dec. 15, 1989). 

Submarine Combat System: Technical Challenges Confronting Navy's 
Seawolf AN/BSY-2 Development (GAO/lMTEC-89-35, Mar. 13, 1989). 

Federal adp Personnel: Recruitment and Retention (G AO/IMTEC-89- 1 2BR, 

Feb. 7, 1989). 
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Appendix VII 



Cost Overruns 



Cost overruns were significant in many of the federal government's infor- 
mation system development efforts we examined. Cost overruns totalling 
over $7 billion were identified. For example, a 1989 report stated that an 
IRS system being developed to automate the examination of tax returns had 
experienced a rise in cost estimates of $800 million. 1 In May 1985, the 
system was expected to cost $ 1 billion over the life of the system. IRS' 1988 
prediction was that the system would cost $1.8 billion. 

In another example, the Air Force had been attempting to modernize the 
computer systems resident in the North American Aerospace Defense Com- 
mand's (NORAD) Cheyenne Mountain complex since 1981.- As of 1989, the 
Air Force had estimated it would need an additional $535 million to com- 
plete the modernization. 



Related Products Space Data: NASA's Future Data Volumes Create Formidable Challenges 

(GAO/lMTEC-91-24, Apr. 8, 1991). 

Attack Warning: Costs to Modernize nokaiVs Computer System 
Significantly Understated (GAo/lMTEC-9 1-23, Apr. 10, 1991). 

Air Traffic Control: Efforts to Modernize Oceanic System Delayed 
(GAO/IMTEC-91-2, Jan. 16, 1991). 

Information Resources: Management Improvements Essential for Key 
Agriculture Automated Systems (gao/imtec-90-85, Sept. 12, 1990). 

Army Automation: Dec isi ons Needed on sil)PEKS-3 Before Furthe r 
Development (GAO/lMTEC-90-66, Sept. 5, 1990). 

Computer Systems: Further Development of Navy's Source Data System 
Needs to Be Reassessed (GAO/iMTEC-90-25, May 8, 1990). 

ADP Budget: Potential Reductions to the Department of Defense's Bud get 
Request (GAO/lMTEC-90-12, Jan. 10, 1990). 

Defense Acquisition: Air Force Prematurely Recommends ADF Acquisitions 
(GAO/IMTEC-90-7, Mar. 29, 1990). 



! A1 )P Moder nization: IRS' Automated Exami nation Syst em-Tro ubled Past, Uncertain Fiiture 
(GAO/lMTEC-89.M;juiie22;i989)r * ' " 

"Attac k Warn ing: Better Managemen t Req uired to Resolve NORAD Integration Deficiencies 
(GAd/lMTECV89.26, jiUy 7, "1989). 
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Cost Overruns 



Air Force Al)P: Systems Funded Without Adequate Cost/Benefit Analyses 

(GAO/lMTEC-90-6, Dec. 28, 1989). 

ADP Modernization: IRS' Automated Examination System-Troubled Past, 
Uncerta i n Future (GAO/IMTEC-89.54, June 22, 1989). 

Computer Procurement: faa's $1.5-Billion Computer Resources Nucleus 
Project (GAO/IMTEC-89-44FS, Mar. 31, 1989). 

ADP Acquisition: Air Force Logistics System Modernization Projects 

(GAO/lMTEC-89-42, Apr. 21, 1989). 

A ir Traffic Control: Voice Communications System Continues to Encounter 

Difficulties (GAO/IMTEC-8P 39, June 1, 1989). 

Computer Procurement: Navy Decision to Terminate Its Standard 
Automated Financial System (GAO/IMTEC-89-37, Mar. 30, 1989). 

ADP Acquisition: Defense Logistics Services Center Modernization Program 
(GAO/IMTEC-89-32, Mar. 20, 1989). 

Attack Warning: Better Management Required to Resolve NORAD 
Integration Deficiencies , (GAO/IMTEC-89-26, July 7, 1989). 

ADP Acq uisition: Army Civilian Personnel System (GAG7IMTEC-89-22FS, 

Mar. 3, 1989). 

ADP Ac quisition: Naval Aviation Logistics Command Management 
InfTmnation System (GAO/IMTEC-89-21FS, Feb. 23, 1989). 

ADP Acquisition: Navy's Effor t s to Develop an Integrated Disbursing an d 
Accounting System (GAO/IMTEC-89-20KS, Feb. 8, 1989). 

ADP Moder nization. Health Care Fi nancing Administration's Software Rede- 
sign Contract (GAOAMTEC-89-15, Mar. 16, 1989) 

Air Force ADP: Logistics Systems Modernization Costs Continue to Inc rease 

(GAO/IMTEC-89-7FS, Dec. 28, 1988). 

Air Tr affic Co ntrol: FAA Sh ould Define th e Optimal Advanced Automation 
System Alternative (GAO/lMTEC-89-5, Nov. 30, 1988). 
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Schedule Delays 



Schedule delays were significant in many of the federal government's infor- 
mation system development efforts. For example, one report stated that by 
1994 the Navy, in its own best estimate, will have spent 1 7 years devel- 
oping a system to automate a manual process of preparing and editing 
data-entry documents for a centralized payroll and personnel system. 1 The 
system, started in 1977, was to have been operational by 1982. As of Feb- 
ruary 1990, however, information on only 64 percent of active-duty per- 
sonnel had been entered into the system. According to the Navy, the 
system was not expected to be fully operational until 1994, which would 
make it 12 years overdue. 

Another example of schedule problems in systems development involved a 
new voice communications system being developed by FAA. Implementa- 
tion of the system was delayed 6 years. 2 The schedule delays occurred in 
part because FAA and its contractors underestimated the complexity of 
building the system. 



Related Products ADP Budget: Potential Reductions to the Department of De fense's Budget 

Request (GAO/lMT r iC-9t-17BR, Dec. 27, 1990). 

Air Traffic Control: Efforts to Modernize Oceanic System Delayed 
(GAO/IMTEC-91-2, Jan. 16, 1991). 

KAA Budget: 1991 Funding Request for Computers and Commu nications 
Can Be Reduced (gao/imtkc-90-89, Sept. 17, 1990). 

Information Resources: M anageme nt Improve ments Essen ti al for Key 
Agriculture Automated Systems (GAO/iMTEC-90-85, Sept. 12, 1990). 

Army Auto mation: Decisions Needed on SIDPERS-3 Before Further 
Develop ment (GAO/IMTEC-90-G6, Sept. 5, 1990). 

Tax System Modernizatio n : Management Mistakes Caused Delays in 
Automated Underreporter System (GAO/lMTEC-90-5i,.JuIy 10, 1990). 

FAA Procurement: Mqjor Data-Processing Contract Should Not Be Awarded 
(GAO/IMTEC-90-38, May 25, 1990). 



Computer Systems: Further Development ^Navy's Source JJata System Needs to Bijiejussessed 
(GAO^Mf EC-90-25, May 8, 1990). " " " " " ~ ~ ' 

"Air Traffic Control: Voice Communications System Continues to Encounter Difficulties 
tUAO/lMTEC-Fl-iiljrjune 1,1989)." 
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Air T raffic Control: Ineffective Management Plagues $1.7-Billio r, Radar 

Program (GAO/lMTEC-90-37, May 31, 1390). 

Computer Systems: Further Development of Navy's Source Data System 
Needs to Be Reassessed (gao/IMTSC-90-25, May 8, 1990). 

Defense Acquisition: Air Force Prematurely Recommends Al)P Acquisitions 

(GAO/IMTEC-90-7, Mar. 29, 1990). 

ADP Budget: Potential Reductions to the Department of the Navy's Budget 

Request (GAO/IMTEC-89-75BR, Sept. 18, 1989). 

ADP Acquisiti on: Air Force Logistics System Modernization Projects 

(GAO/lMTEC-89-42, Apr. 21, 1989). 

Air Traffic Control. Voice Communications System Continues to Encoun ter 
Difficulties (GAO/lMTEC-89-39, June 1, 1989). 

Computer Procurement: Navy Decision to Terminate Its Standard 
Automated Financial System (GAO/lMTEC-89-37, Mar. 30, 1989). 

ADP Modernization: IRS Needs to Assess Design Alternatives for Its Elec- 
tron^ Filing System (GAO/lMTEC-89-33, May 5, 1989). 

Medical ADP Systems: Composite Health Care System Operational Tests 

Extended (GAO/lMTEC-89-30, Apr. 10, 1989). 

Attack Warning: B e tter Management Required to Re s olve NORAD 
Integration Deficiencies (GAO/IMTEC-89-26, July 7, 1989). 

Sp ace Defense: Management and Technical Problems Delay Operations 
Center Acquisition (GAO/1MTEC-89-18, Apr. 20, 1989). 



ADP Modern ization: Health Care Financing Administration's Software Rede- 
sfgn Contract (GAO/IMTEC-89-15, Mar. 16, 1989). 

Air Force adp : Logistics Systems Modernization Costs Continue to Increas e 

^Al)7lMTET ; ^89-7I , S, Dec. 28, 1988). 
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Information Systems Not Performing As 
Intended 



Information systems used in daily agency operations have failed to perform 
the tasks for which they were intended. One example of this problem was 
the difficulty IKS had with its interim electronic filing system during the 
1988 tax filing season. 1 An essential component of ins' system was the 
imaging subsystem, which permitted tax examiners to access and annotate 
images of tax returns, rather than relying on paper originals and copies. 
M Qien the imaging subsystem did not work, IKS tax examiners had to use 
stopgap measures such as printing paper copies of the returns, annotating 
their corrections, and storing these paper records. 

In another example, a 1989 report documented that the Air Force was still 
having critical operational and performance problems with its new satellite 
communications system. 2 Because of the problems with the computer 
hardware and software, the new system was only able to handle 55 percent 
of the communications required between the military satellites and ground 
facilities. The report concluded that ui . technical deficiencies were 
resolved, the planned deactivation of an oiuer system that was expensive to 
maintain would be delayed. 



Related Products Banks and Thrifts: Ca use of Federa l Regul ator s' Delays in Releasing Timely 

Call Report Data (GAO/1MTEC-91-20BK, Fob. 26, 1991). 

Air Force adp; Mil li ons Can Be Saved If Aut omated Technical Order System 
Is Discontinued (GAO/lMTliC-90-72, Aug. 23, 1990). 

Air Force ADP: Depot Maintenance System Development Risks Are High 
(UAO/IMTEC-90-4G, May 25, 1990). ~~ 

Computer System s: Fu rther Devel opm ent of Navy's Source Data System 
Needs to Be Reassessed (gao/IMTEC-90-25, May 8. 1990). 

Military Space O pera tions: Operational Problems Continue With the Satel- 
lite Control Computer Syst em (gao/IMTEC-89-56, Aug' 8, 1989), 

Air Traffic Control: Voice Communicatio ns System Continues to Er.vuiinter 
Difficulties (GAO/IMTEC-80-3D, June 1, 1989), 



'ADP Modernization: IKS Needs to Assess Design Alternatives for lis Electronic Filing System 
(GA0/1MTEC-89-M 

"Military Spare Operations: Operational Problems Continue With the Satellite Control Computer 
System (GAO/lMtKC-W).f)«, Aug. 8, 1989). 
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Information Systems Not Perfonnlng As 
Intended 



Al)P Modernizati on: irs Needs to Assess Design Alternatives for Its Elec- 

tr oi^ May 5, 1989). 
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Appendix X 

Data That Were Inaccurate, Unreliable, or 
Incomplete 



Numerous examples of inaccurate, unreliable, or incomplete data were dis- 
covered. One report found that the Veterans Administration had rot been 
able to easily maintain the quality of its information because its data 
resided in over 150 fragmented automated systems and multiple, ad hoc 
manual systems. 1 Consequently, the Veterans Administration could not 
verify the quality of the service it provided to veterans. 

In another report, NASA was criticized for not storing any data for some 
missions and having incomplete data for many important missions. 2 For 
example, the data collected by the Apollo 9 mission u i 1969 had not been 
stored in a NASA facility and its current location was unknown at the time of 
the report. For those missions for which NASA had stored data, agency 
policy only required the archiving of analyzed data, and not the data from 
which the analysis was derived. Once analyzed, the original data were 
destroyed. Both NASA's own and other studies have shown the value of 
retaining original data sets for the use of future researchers. 



Related Products Medicare: Flawed Data Add Millions to Teaching Hospital Payments 

(GAO/IMTEC-9 1-31 .June 4. 1991). 

Customs Automation: Progress Made, More Expected in Revenu e 
Reconciliation Process (GAO/lMTEC-91-27, Mar. 7, 1991). 

Tax System Modernization: Status of IRS 1 Input Processing Initiative 
(GAO/IMTEC-91-9, Dec. 12, 1990). ~ ~~ 

Stafford Student Loans: Millions of Dollars in Loans Awarded to Ineligible 
Borrowers (GAO/lMTEC-91-7, Dec, 12, 1990). 

Information Resources: Problems Persist in Justice's ADP Management and 
Operations (GAO/lMTEC-91-4, Nov. 6, 1990). 

Space Operations: NASA I s Not Archiving All Potentially Valuable Da ta 
(GAO/1MTEC-91-3, Nov, 2, 1990). 

Trademark Automation: Information on System Problems and Planned 
Improvements (GAO/lMTEC-91-i, Oct. 9, 1990). 



Inf ormation Resour ces; Management Commitment Needed to Meet Information Challenges, 
(GAO/IMTEC-90-27, Apr. 19. 1990). 

"Space Operat ions: N ASA Is No t Arc hiving All iV tcntially Valuable Data, (GAO/IMTEC-91-M, 
Nov! 2 t 1990). 




Page 32 O ? GAO/IMTBC-92-13FS Federal Agencies' IRM Problems 



Appendix X 

Data That Were Inaccurate, Unreliable, or 
Incomplete 



Information Management: Immigration and Naturalization Service Lacks 
R eady Access to Essential Data (GAO/IMTEC-90-75, Sept. 27, 1990). 

Minerals Management Service: Improvements Planned for Automated 
Royalty Management System (GAO/IMTEC-90-65, July 27, 1990). 

Coast Guard: Strategic Focus Needed to Improve Information Resources 
Management (GAO/IMTEC-90-32, Apr. 24, 1990). 

Customs Automation: Duties and Other Collections Vulnerable to Fraud 
and Abuse (GAO/lMTEC-90-29, Feb. 28, 1990). 

Information Resources: Management Commitment Needed to Meet 
Information Challenges (gao/imtec-90-27, Apr. 19, 1990). 

Tax System Modernization: IRS' Efforts to Improve Taxpayer 
Correspondence (GAO/IMTEC-90-26, Mar. 22, 1990). 

adp Systems: EEQC's Charge Data System Contains Errors but System Sat- 
isfies Users (GAO/IMTEC-90-5, Dec. 12, 1989). 

ADP Planning: FDA's Plans to Improve Processing of Medical Device and 
Drug Applications (GAO/IMTEC-89-58, June 13, 1989). 

Immigration Reform: Alien Verification System Data Base Problems and 
Corrective Actions (GA0/IMTEO89-52, June 26, 1989). 

Customs Automation: Internal Control Weaknesses in Customs' Revenue 
Collection Process (GAO/IMTEC-89-50, Apr. 11, 1989). 

Customs Automation: Observations on Selected Automated Commercial 
System Modules (GAO/IMTEC-89-4BR, Dec. 21, 1988). 
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Appendix XI 



Poorly Designed Systems Made Access to Data 
Time-consuming or Cumbersome 



Instances in which agencies' poorly designed or implemented systems 
made data access difficult were identified. The access problems ranged 
from an inconvenience or time delay in obtaining information to informa- 
tion being so difficult to retrieve that agency personnel rarely use it. 

For example, a 1989 report stated that the Social Security Administration's 
field offices did not have easy access to information required to process 
retirement claims. 1 Among other problems, they had to use two different 
systems to get the information, which caused user dissatisfaction and 
minor delays in getting needed information. Another report documented 
that the Coast Guard field office staff found its ivuyor law enforcement 
system so difficult, tedious, and time-consuming to use that staff rarely 
used the system to support decisions.- 



Related Products Customs Automation : Progre ss Made, More E x pected in Revenue 

Reconciliation Process (GAO/1MTEC-91-27, Mar. 7, 1991). 

Trademark Automation: Information on System Problems and Planned 
Improvements (gao/IMTEC-91-1, Oct. 9, 1990). 

Information Management: Immigration and Naturalizatio n Service Lacks 
Ready Access to Essential Data (GAO/IMTEC-90-75, Sept. 27, 1990). 

Public Access: Two Case Studies of Federal Electronic Dissemination 
(GAO/1MTEC-90-44BR, May 14, 1990). 

Coast Guard: Strategic Focus Ne eded to Improve Information Resources 
Management (GAO/IMTEC-90-32, Apr. 24, 1990). " 

Information Resources: Mana ge ment Comm itment Ne eded to Meet 
Information Ch^lenges (GAO/lMTlic>90-27, Apr. 19, 1990). 

A DF Planning: FDA 's Plans t o Improve Processing of Medical Device and 

Drug Applications (GAO/IMTEC-89-58, June 13, 1989). 

ADP Systems: 3SA Efforts in Implementing Its FVd Office Modernization 
(GAO/IMTEC-89-45, May 17, 1989). 



1 A1)P Systems: SSA Efforts in Implementing lis Field Office Modernization (GAO/1MTEC-89-45, 
May 17, 1989). 

"Coast Guard: Strategic Focus Needed tojmprove Information Resources Management 
(GAO/iMtEC-90-32, Apr/lM/imA)). " 
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Appendix XII 

Major Contributors to This Report 



Information Nancy A. Simmons, Assistant Director 

llUUIIlldUUIl Suzanne M. Burns, Assignment Manager 

Management and Kevin G. McCarthy, Evaluator-in-Charge 

Technology Division, Micia D - Wri g ht » computer scientist 
Washington, D.C. 
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